Malicious PDF — malware analysis report

Static analysis result for SHA-256 925967a1306079c7…

MALICIOUS

PDF

43.1 KB Created: 2019-04-30 06:40:33 +01:00 Authoring application: mPDF 5.7
MD5: fe00d5cb3d5d287a9b70884831e7ada5 SHA-1: c623b28ba9d7ed81990c2ce672aa527f524476b1 SHA-256: 925967a1306079c72c6b76667c12a25e5083b0243a868c683b2ee8ab2fe13e6e
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests a lure to external content, potentially for SEO manipulation or to direct users to malicious sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9093098099095091/Proceedings-of-the-Second-April-Conference-of-University-Teachers-of-English-Cracow-1981-April-23-29-Papers-in-English-and-American-Literature-Cul-by-Irena-Kaluza.pdf
    • http://loaminoo.linkpc.net/8099092098098093/18th-European-White-Dwarf-Workshop-Proceedings-of-a-Conference-Held-at-the-Pedagogical-University-of-Cracow-Poland-13-17-August-2012-by-Jurek-Krzesianski.pdf
    • http://loaminoo.linkpc.net/9093098099094097/A-Short-History-of-English-Versification-From-the-Earliest-Times-to-the-Present-Day-A-Handbook-for-Teachers-and-Students-by-Max-Kaluza.pdf
    • http://loaminoo.linkpc.net/9093098099097096/A-short-history-of-English-versification-from-the-earliest-times-to-the-present-day-a-handbook-for-teachers-and-students-by-Max-Kaluza.pdf
    • http://loaminoo.linkpc.net/9093098098095098/A-Short-History-of-English-Versification-from-the-Earliest-Times-to-the-Present-Day-A-Handbook-for-Teachers-and-Students-by-Max-Kaluza.pdf
    • http://loaminoo.linkpc.net/7091096095096098/Artificial-Intelligence-and-Soft-Computing-11th-International-Conference-Icaisa-2012-Zakopane-Poland-April-29---3-May-2012-Proceedings-Part-I-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/1091092096099096095/2007-5th-International-Conference-on-Microwave-and-Millimeter-Wave-Technology-Proceedings-Icmmt-2007-April-19-21-2007-Guilin-China-by-Institute-of-Electrical-and-Electronics-Engineers.pdf
    • http://loaminoo.linkpc.net/1090099091098092090/Database-Systems-for-Advanced-Applications-16th-International-Conference-DASFAA-2011-International-Workshops-GDB-SIM3-FlashDB-SNSMW-DaMEN-DQIS-Hong-Kong-China-April-22-25-2011-Proceedings-by-Jianliang-Xu.pdf
    • http://loaminoo.linkpc.net/3096099092095093/English-Lit-Relit-A-Short-History-of-English-Literature-from-the-Precursors-Before-Swearing-to-the-Pre-Raphaelites-and-a-Little-After-Intended-to-Help-Students-See-the-Thing-Through-or-See-Through-the-Thing-and-Omitting-Nothing-Unimportant-by-Richard-Armour.pdf
    • http://loaminoo.linkpc.net/5096098094094099/Basic-English-Grammar-A-Guide-for-New-and-Prospective-ESL-Teachers-CELTA-Preparation-ESL-Resources-for-New-and-Prospective-Teachers-Book-1-by-Miles-Jaworski.pdf
    • http://loaminoo.linkpc.net/2097095090097099/Literary-Criticism-Vol-1-Essays-on-Literature-American-Writers-English-Writers-by-Henry-James.pdf
    • http://loaminoo.linkpc.net/1091099093092098093/Erstes-Programm-Des-Progymnasiums-Zu-Montabaur-Ber-Die-Zeit-Von-Herbst-1868-Bis-Ostern-1870-Mit-Welchen-Zu-Den-Ffentlichen-PR-Fungen-Am-Dienstag-Den-12-April-Sowie-Zu-Der-Schlussfeier-Am-Mittwoch-Den-13-April-in-Namen-Des-Lehrerkollegiums-Erg-by-Robert-Pahler.pdf
    • http://loaminoo.linkpc.net/1090095097092091090/Diffusion-in-Materials-DIMAT-2004-Proceedings-of-the-6th-International-Conference-on-Diffusion-in-Materials-Cracow-Poland-July-18-23-2004-by-Z-Zurek.pdf
    • http://loaminoo.linkpc.net/9094095091094094/Proceedings-of-the-4th-Workshop-on-Pasa-96-Parallel-Systems-amp-Algorithms-Research-Center-Julich-Germany-10-12-April-1996-by-Friedel-Hossfeld.pdf
    • http://loaminoo.linkpc.net/5098095094091093/Artists-of-La-Revue-Blanche-Bonnard-Toulouse-Lautrec-Vallotton-Vuillard-Memorial-Art-Gallery-of-the-University-of-Rochester-January-22-April-by-Bret-Waller.pdf
    • http://loaminoo.linkpc.net/9091092099090093/English-German-Bible---The-Gospels-XX---Matthew-Mark-Luke-amp-John-Basic-English-1949---Elberfelder-1905---Lutherbibel-1545-Parallel-Bible-Halseth-English-Book-935-by-Truthbetold-Ministry.pdf
    • http://loaminoo.linkpc.net/9091092097095098/Radiation-Protection-in-Medicine-Proceedings-of-the-Twenty-Eighth-Annual-Meeting-1-2-April-1992-As-Presented-at-the-Crystal-City-Marriott-Arlin-by-Andrew-K-Poznanski.pdf
    • http://loaminoo.linkpc.net/5096098095090092/Intermediate-English-Grammar-A-Guide-for-New-and-Prospective-ESL-Teachers-by-Miles-Jaworski.pdf
    • http://loaminoo.linkpc.net/4098097092094098/A-Boy-in-Terez-n-The-Private-Diary-of-Pavel-Weiner-April-1944-April-1945-by-Pavel-Weiner.pdf
    • http://loaminoo.linkpc.net/6090098090094094/English-as-a-Foreign-Language-Teachers-Tpack-Emerging-Research-and-Opportunities-by-Mehrak-Rahimi.pdf
    • http://loaminoo.linkpc.net/9093098099094097/A-Short-History-of-English-Versification-From-the

Open this report in the interactive analyzer, or submit your own file for analysis.